NVD

Id
19478  
Name
CVE-2016-3710  
Description
The VGA module in QEMU improperly performs bounds checking on banked access to video memory, which allows local guest OS administrators to execute arbitrary code on the host by changing access modes after setting the bank register, aka the "Dark Portal" issue.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-05-11  
Modified Date
2016-11-30  
Seq
2016-3710  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
107238 19478 CVE-2016-3710 RHSA-2016:0724  View
107239 19478 CVE-2016-3710 RHSA-2016:0725  View
107240 19478 CVE-2016-3710 RHSA-2016:0997  View
107241 19478 CVE-2016-3710 RHSA-2016:0999  View
107242 19478 CVE-2016-3710 RHSA-2016:1000  View
107243 19478 CVE-2016-3710 RHSA-2016:1001  View
107244 19478 CVE-2016-3710 RHSA-2016:1002  View
107245 19478 CVE-2016-3710 RHSA-2016:1019  View
107246 19478 CVE-2016-3710 http://support.citrix.com/article/CTX212736  View
107247 19478 CVE-2016-3710 DSA-3573  View
107248 19478 CVE-2016-3710 [oss-security] 20160509 CVE-2016-3710 Qemu: vga: out-of-bounds r/w access issue  View
107249 19478 CVE-2016-3710 http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html  View
107250 19478 CVE-2016-3710 http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html  View
107251 19478 CVE-2016-3710 http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html  View
107252 19478 CVE-2016-3710 90316  View
107253 19478 CVE-2016-3710 1035794  View
107254 19478 CVE-2016-3710 USN-2974-1  View
107255 19478 CVE-2016-3710 http://xenbits.xen.org/xsa/advisory-179.html  View
107256 19478 CVE-2016-3710 RHSA-2016:1224  View
107257 19478 CVE-2016-3710 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05164862  View
107258 19478 CVE-2016-3710 [Qemu-devel] 20160509 [PULL 1/5] vga: fix banked access bounds checking (CVE-2016-3710)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
1961 JVNDB-2016-002734 QEMU の VGA モジュールにおけるホスト上で任意のコードを実行される脆弱性 QEMU の VGA モジュールは、ビデオメモリへのバンクアクセスの境界チェックを適切に実行しないため、ホスト上で任意のコードを実行される脆弱性が存在します。 CVE-2016-3710 90216 CVE-2016-3710 19478 7.2 8.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002734.html 2016-05-09 2016-11-17 View